Daniel Karistai
@hackswithcoffee.bsky.social
hacker, recovering sysadmin turned security manager
Always wondering where my next cup of coffee is going to come from
Always wondering where my next cup of coffee is going to come from
The sunday scaries has nothing on the last evening of a month and a half long furlough and a message from your boss saying "be ready to go all in on AI".
November 12, 2025 at 9:40 PM
The sunday scaries has nothing on the last evening of a month and a half long furlough and a message from your boss saying "be ready to go all in on AI".
I've wondered when he was gonna jump on this debunked hot take that boomers have already beaten to death.
RFK claims mass shootings could be linked to video games
This has been widely dismissed — including by studies from the Secret Service, Department of Education, and American Psychological Association
This has been widely dismissed — including by studies from the Secret Service, Department of Education, and American Psychological Association
September 10, 2025 at 1:39 PM
I've wondered when he was gonna jump on this debunked hot take that boomers have already beaten to death.
A year ago we eloped. It was the most beautiful and happiest day of my life. 🥹🥹
September 5, 2025 at 9:48 PM
A year ago we eloped. It was the most beautiful and happiest day of my life. 🥹🥹
Baudrillard would have a FIELD DAY with this one.
Personally, while I loved BOTW it is easily the loneliest game I have ever played.
phys.org/news/2025-08...
Personally, while I loved BOTW it is easily the loneliest game I have ever played.
phys.org/news/2025-08...
phys.org
August 21, 2025 at 12:17 PM
Baudrillard would have a FIELD DAY with this one.
Personally, while I loved BOTW it is easily the loneliest game I have ever played.
phys.org/news/2025-08...
Personally, while I loved BOTW it is easily the loneliest game I have ever played.
phys.org/news/2025-08...
I'm really sad about not being able to make it to summer camp this year.
If you’re 1337 enough to be on BlueSky, you’re 1337 enough to find two of your fucking friends and sign up to play Hacker Jeopardy at @defcon.bsky.social
do it for the memes
do it for the free beer
do it to be roasted by me (lovingly)
hackerjeopardy.com
n00bs welcomed. #DFIU
do it for the memes
do it for the free beer
do it to be roasted by me (lovingly)
hackerjeopardy.com
n00bs welcomed. #DFIU
July 30, 2025 at 11:50 AM
I'm really sad about not being able to make it to summer camp this year.
Reposted by Daniel Karistai
The gleeful doxing of someone cheating in public is bad even if they are a CEO and even if they are a Coldplay fan. It's bad because this kind of thing is happening to random people on TikTok for such crimes as "sitting silently on a plane" or "being attractive"
www.404media.co/the-astronom...
www.404media.co/the-astronom...
The Astronomer CEO's Coldplay Concert Fiasco Is Emblematic of Our Social Media Surveillance Dystopia
Facial recognition and crowdsourced social media investigations are constantly being used not just on cringe CEOs, but on random people who are simply existing in public.
www.404media.co
July 17, 2025 at 6:59 PM
The gleeful doxing of someone cheating in public is bad even if they are a CEO and even if they are a Coldplay fan. It's bad because this kind of thing is happening to random people on TikTok for such crimes as "sitting silently on a plane" or "being attractive"
www.404media.co/the-astronom...
www.404media.co/the-astronom...
There are definitely times I miss living in New Orleans.
July 13, 2025 at 12:59 PM
There are definitely times I miss living in New Orleans.
My paid leave request to go to DefCon was denied and it was my last effort to make this work.
While it's probably good for me to put that $$ toward a down payment on a house, but gonna be missing my friends local and abroad quite a lot.
While it's probably good for me to put that $$ toward a down payment on a house, but gonna be missing my friends local and abroad quite a lot.
July 11, 2025 at 12:07 PM
My paid leave request to go to DefCon was denied and it was my last effort to make this work.
While it's probably good for me to put that $$ toward a down payment on a house, but gonna be missing my friends local and abroad quite a lot.
While it's probably good for me to put that $$ toward a down payment on a house, but gonna be missing my friends local and abroad quite a lot.
Reposted by Daniel Karistai
“I just thought it was pretty uniquely dystopian compared to a normal hiring process, right?" the security researcher told WIRED. “So I started applying for a job, and then after 30 minutes, we had full access to virtually every application that's ever been made to McDonald's going back years.”
McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’
Basic security flaws left the personal info of tens of millions of McDonald’s job-seekers vulnerable on the “McHire” site built by AI software firm Paradox.ai.
www.wired.com
July 9, 2025 at 7:34 PM
“I just thought it was pretty uniquely dystopian compared to a normal hiring process, right?" the security researcher told WIRED. “So I started applying for a job, and then after 30 minutes, we had full access to virtually every application that's ever been made to McDonald's going back years.”
Reposted by Daniel Karistai
The age of the AI scraping free-for-all may be coming to an end—at least if Cloudflare gets its way. The IT infrastructure firm has switched to blocking AI crawlers by default for its customers and is moving forward with a Pay Per Crawl program.
Cloudflare Is Blocking AI Crawlers by Default
The age of the AI scraping free-for-all may be coming to an end. At least if Cloudflare gets its way.
wrd.cm
July 6, 2025 at 11:56 PM
The age of the AI scraping free-for-all may be coming to an end—at least if Cloudflare gets its way. The IT infrastructure firm has switched to blocking AI crawlers by default for its customers and is moving forward with a Pay Per Crawl program.
Do. Not. Disturb.
July 4, 2025 at 7:02 PM
Do. Not. Disturb.
Reposted by Daniel Karistai
David Hogg is cooking lately
June 26, 2025 at 5:13 PM
David Hogg is cooking lately
I have never been this jealous of a bear before.
June 25, 2025 at 8:36 PM
I have never been this jealous of a bear before.
Reposted by Daniel Karistai
Reposted by Daniel Karistai
Amazing.
🎉 Big update!
The #InternetArchive has launched a new version of GifCities, our search engine for vintage GeoCities GIFs. Search better. Blink more!
Check it out ➡️ blog.archive.org/2025/06/09/k...
🧵
The #InternetArchive has launched a new version of GifCities, our search engine for vintage GeoCities GIFs. Search better. Blink more!
Check it out ➡️ blog.archive.org/2025/06/09/k...
🧵
June 12, 2025 at 12:26 AM
Amazing.
Reposted by Daniel Karistai
I'm just glad one of these men has the nuclear codes and the other has all our personal data.
June 5, 2025 at 8:24 PM
I'm just glad one of these men has the nuclear codes and the other has all our personal data.
My boss says I'm paranoid, but it is really only a matter of time before disloyalty to the administration violates their "suitability and fitness standards".
federalnewsnetwork.com/hiring-reten...
federalnewsnetwork.com/hiring-reten...
OPM seeks fast-track removal of federal employees for ‘suitability’ reasons in proposed rule
MSPB would have limited jurisdiction to hear appeals from federal employees who are removed from their jobs under OPM’s updated suitability standard.
federalnewsnetwork.com
June 3, 2025 at 1:25 PM
My boss says I'm paranoid, but it is really only a matter of time before disloyalty to the administration violates their "suitability and fitness standards".
federalnewsnetwork.com/hiring-reten...
federalnewsnetwork.com/hiring-reten...
Our little patio garden is thriving. Not in the picture is two full blown tomato plants 😍
May 30, 2025 at 11:46 AM
Our little patio garden is thriving. Not in the picture is two full blown tomato plants 😍
The threat hunts will be fun with this one 😀
Microsoft has discovered a cluster of worldwide cloud abuse activity by new Russia-affiliated threat actor Void Blizzard (LAUNDRY BEAR), whose cyberespionage activity targets gov't, defense, transportation, media, NGO, and healthcare in Europe and North America. https://msft.it/63324S9Jkp
New Russia-affiliated actor Void Blizzard targets critical sectors for espionage | Microsoft Security Blog
Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since at least April 2024. Void Blizzard’s cyberespionage operations tend to be highly targeted at specific organizations of interest to Russia, including in government, defense, transportation, media, non-governmental organizations (NGOs), and healthcare sectors primarily in Europe and North America.
msft.it
May 28, 2025 at 12:02 PM
The threat hunts will be fun with this one 😀
It's remarkable to me that after all the resources Apple has dumped into its "personal intelligence service" autocorrect is still a piece of shot.
May 23, 2025 at 5:54 PM
It's remarkable to me that after all the resources Apple has dumped into its "personal intelligence service" autocorrect is still a piece of shot.
Job Hunting 🧵: Over the past few months I have submitted my resume to around 100 different job posts. The resumes were a mix of hyper-tailored, my template resume, and AI infused garbage.
May 22, 2025 at 1:07 PM
Job Hunting 🧵: Over the past few months I have submitted my resume to around 100 different job posts. The resumes were a mix of hyper-tailored, my template resume, and AI infused garbage.
Reposted by Daniel Karistai
DEF CON legal update: Truth is a complete defense against defamation.
The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice.
You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report.
#defcon #legalupdate
The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice.
You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report.
#defcon #legalupdate
May 13, 2025 at 9:36 PM
DEF CON legal update: Truth is a complete defense against defamation.
The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice.
You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report.
#defcon #legalupdate
The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice.
You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report.
#defcon #legalupdate
Today's set list.
May 10, 2025 at 2:42 PM
Today's set list.